Unscored severity · published Dec 31, 2005
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…
–
CVSS
0.4%
EPSS
No
On KEV
Description
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Blackice Agent Server · Iss
All versions, or not specified · source: NVD
BP
Blackice PC Protection · Iss
3.6; 3.6cpu · source: NVD
BS
Blackice Server Protection · Iss
All versions, or not specified · source: NVD
RD
Realsecure Desktop · Iss
3.6; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2711
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2711
secunia.com
http://secunia.com/advisories/19327
securitytracker.com
http://securitytracker.com/id?1015820
securitytracker.com
http://securitytracker.com/id?1015821
Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403
www.osvdb.org
http://www.osvdb.org/24096
www.securityfocus.com
http://www.securityfocus.com/bid/17218
More from Blackice Agent Server
–
CVE-2004-2125
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by…
–
CVE-2004-0362
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE…
–
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series,…